$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C3ACDF20A0511F0AB42972BC4F9AE02.roa File: 2C3ACDF20A0511F0AB42972BC4F9AE02.roa (raw, json) Hash identifier: vVrpQqICmCs5EaA2/8ZI/P7o4rDo75AqgCJ/mvKz8DA= Subject key identifier: FA:42:0D:F2:EE:F7:3D:87:7E:6F:77:43:12:59:B7:73:20:3F:57:65 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: AC84 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C3ACDF20A0511F0AB42972BC4F9AE02.roa Signing time: Wed 26 Mar 2025 05:42:58 +0000 ROA not before: Wed 26 Mar 2025 05:42:58 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 147279 IP address blocks: 103.86.104.0/22 maxlen: 22 103.86.104.0/24 maxlen: 24 103.86.105.0/24 maxlen: 24 103.86.106.0/24 maxlen: 24 103.86.107.0/24 maxlen: 24 103.162.210.0/23 maxlen: 24 103.176.234.0/23 maxlen: 24 2001:df0:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 15:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44164 (0xac84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Mar 26 05:42:58 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67e393e2-2922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:62:4b:61:42:8e:fd:76:c2:84:0b:07:73: fb:dc:b5:b2:11:56:27:40:dd:ac:89:48:7d:49:8c: 1e:f1:62:04:27:18:27:d2:66:a2:44:84:95:2c:80: c4:55:9f:bb:b7:59:8d:8e:aa:08:59:83:4c:fa:e7: c7:cc:c8:36:a3:0e:4d:f4:6c:ba:06:23:fe:ea:71: d5:05:62:f3:45:55:0d:29:00:c1:6a:d1:fb:46:f0: d5:ab:68:0f:27:75:9b:75:23:3d:e9:52:0b:62:9f: 84:14:e8:6a:4f:93:6f:a5:ef:35:f8:79:aa:27:e1: b6:b8:90:38:bc:d1:4d:e8:bf:56:fd:df:be:06:cd: 1d:c2:b7:39:a2:b0:4a:09:eb:58:93:a3:4e:ee:f6: f7:8a:27:80:e8:b8:e5:f7:6c:6f:cd:82:68:db:42: 18:d1:f6:b8:60:8e:01:3f:c0:9f:d4:a9:5c:ff:45: a1:cf:25:b4:fb:04:ba:03:0a:bd:35:4c:4a:99:88: a0:f8:38:ed:eb:51:48:e8:c8:84:9b:64:98:58:d3: 64:b3:30:12:5b:14:33:08:6d:4e:b1:c9:c8:10:63: a6:ce:f7:42:b3:70:1f:bd:7d:b5:5a:1d:b3:85:21: bd:28:6b:52:f1:dc:a6:ed:3a:a9:ef:4c:5d:31:38: d1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:42:0D:F2:EE:F7:3D:87:7E:6F:77:43:12:59:B7:73:20:3F:57:65 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C3ACDF20A0511F0AB42972BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.104.0/22 103.162.210.0/23 103.176.234.0/23 IPv6: 2001:df0:6100::/48 Signature Algorithm: sha256WithRSAEncryption 06:b7:03:40:b0:94:5e:7a:97:bd:53:18:26:1c:6c:6d:23:30: 83:fe:97:22:fd:6b:e5:78:18:cf:92:3f:15:cd:20:5d:81:a4: c1:99:e0:72:53:a4:6f:19:c8:da:43:62:82:5b:48:f5:ad:fd: 46:62:88:29:37:20:4e:1e:09:a2:47:80:63:97:4d:7b:51:7b: 07:2d:6a:aa:fb:d4:ac:dc:56:1f:26:14:5d:8d:e2:f5:69:e3: 43:04:18:56:49:f8:b0:42:be:b3:a0:ca:70:fd:02:72:2b:26: 48:6f:36:c3:03:9d:c6:8b:90:70:8c:2b:1f:0a:f4:23:1b:77: e5:7a:f7:6a:55:e9:9d:7c:8c:13:53:26:f4:57:f5:09:06:d0: e0:ce:7f:c9:3d:fc:2b:a4:46:87:4f:b6:e9:78:2d:3e:46:40: 54:49:ee:5c:2e:ac:7c:b3:9c:2b:cc:8d:ad:2b:ab:c6:fb:97: 2f:8f:e5:08:a7:cd:d8:cf:9a:a8:50:91:d5:ec:c4:44:70:d3: 73:15:2f:c1:50:07:fa:ce:0f:6e:c2:f3:13:80:fb:a7:c7:f6: da:dd:b1:25:f7:36:57:7b:29:65:09:f4:d6:4e:d0:b4:53:01: a6:f6:6b:01:88:22:24:5f:3c:99:84:d9:b6:2c:cd:aa:f0:b2: 0c:17:1c:24 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAKyEMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDMyNjA1NDI1OFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjdlMzkzZTItMjkyMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRBYkthQo79dsKECwdz+9y1shFWJ0DdrIlIfUmMHvFiBCcYJ9JmokSElSyA xFWfu7dZjY6qCFmDTPrnx8zINqMOTfRsugYj/upx1QVi80VVDSkAwWrR+0bw1ato Dyd1m3UjPelSC2KfhBToak+Tb6XvNfh5qifhtriQOLzRTei/Vv3fvgbNHcK3OaKw SgnrWJOjTu7294ongOi45fdsb82CaNtCGNH2uGCOAT/An9SpXP9Foc8ltPsEugMK vTVMSpmIoPg47etRSOjIhJtkmFjTZLMwElsUMwhtTrHJyBBjps73QrNwH719tVod s4UhvShrUvHcpu06qe9MXTE40c0CAwEAAaOCArIwggKuMB0GA1UdDgQWBBT6Qg3y 7vc9h35vd0MSWbdzID9XZTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJDM0FDREYy MEEwNTExRjBBQjQyOTcyQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDwGCCsGAQUFBwEHAQH/ BC0wKzAYBAIAATASAwQCZ1ZoAwQBZ6LSAwQBZ7DqMA8EAgACMAkDBwAgAQ3wYQAw DQYJKoZIhvcNAQELBQADggEBAAa3A0CwlF56l71TGCYcbG0jMIP+lyL9a+V4GM+S PxXNIF2BpMGZ4HJTpG8ZyNpDYoJbSPWt/UZiiCk3IE4eCaJHgGOXTXtRewctaqr7 1KzcVh8mFF2N4vVp40MEGFZJ+LBCvrOgynD9AnIrJkhvNsMDncaLkHCMKx8K9CMb d+V692pV6Z18jBNTJvRX9QkG0ODOf8k9/CukRodPtul4LT5GQFRJ7lwurHyznCvM ja0rq8b7ly+P5QinzdjPmqhQkdXsxERw03MVL8FQB/rOD27C8xOA+6fH9trdsSX3 Nld7KWUJ9NZO0LRTAab2awGIIiRfPJmE2bYszarwsgwXHCQ= -----END CERTIFICATE-----Generated at Fri Apr 4 10:55:54 2025 by rpki-client